Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/R6cbOckzNp9tsZ6iX7oO7A8Wpz4.roa
File: R6cbOckzNp9tsZ6iX7oO7A8Wpz4.roa (raw, json)
Hash identifier: WKNxsR8F2Cu6damGiZgkIoSefNrrAHwqogTAngapQS0=
Subject key identifier: 47:A7:1B:39:C9:33:36:9F:6D:B1:9E:A2:5F:BA:0E:EC:0F:16:A7:3E
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01A0B583C7FE00B2DE22F0241BB031E9507D
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/R6cbOckzNp9tsZ6iX7oO7A8Wpz4.roa
Signing time: Fri 18 Sep 2026 17:15:07 +0000
ROA not before: Fri 18 Sep 2026 17:15:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210699
IP address blocks: 2a0f:b240:1400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:83:c7:fe:00:b2:de:22:f0:24:1b:b0:31:e9:50:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Sep 18 17:15:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47a71b39c933369f6db19ea25fba0eec0f16a73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cd:80:c3:49:6b:33:a3:49:e2:21:f6:43:c6:
a2:af:2f:df:3f:cf:75:ca:08:bd:7a:7e:1a:29:34:
47:d4:cc:95:f6:bd:e8:ef:7e:ab:17:de:7a:07:2e:
58:5e:82:ab:0c:68:02:ab:cf:27:a2:3a:64:0a:a2:
c5:e3:42:d8:f5:f5:31:e1:4b:c9:25:77:62:ac:40:
e9:e1:09:95:95:59:b1:42:57:ff:aa:12:89:68:98:
d6:f2:c2:fa:73:05:69:85:1b:aa:6e:21:47:4d:6c:
ca:38:67:5d:e8:ea:2c:de:8f:bb:a5:f3:7a:6d:7b:
24:50:09:a0:58:9d:7c:a8:47:91:94:c3:0b:4b:29:
97:c6:51:a3:c0:35:94:a6:3f:c6:c5:f7:e2:3c:36:
e5:72:9e:62:30:7e:c6:e4:51:1b:4d:f1:a0:1e:f2:
ea:6b:1b:28:4e:bf:cd:9f:29:98:40:42:fa:9a:91:
5a:25:1d:b8:8d:5c:c6:84:a7:db:66:99:81:a0:da:
76:70:76:58:6f:0c:06:e7:3e:10:59:9b:bd:04:0c:
ee:ea:d8:df:c5:cd:c4:41:33:a8:6b:0d:0a:e5:56:
11:0a:fc:59:61:34:cf:a2:4d:93:30:a3:d2:78:44:
b5:e5:d2:fd:11:fc:25:89:cc:ea:6f:0d:fd:8c:c2:
ec:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A7:1B:39:C9:33:36:9F:6D:B1:9E:A2:5F:BA:0E:EC:0F:16:A7:3E
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/R6cbOckzNp9tsZ6iX7oO7A8Wpz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:1400::/40
Signature Algorithm: sha256WithRSAEncryption
2b:ec:fb:2c:d4:8e:0e:4d:06:bc:bd:73:d0:08:df:c0:3b:e5:
27:b5:de:ae:87:6e:b5:9e:35:df:4f:9a:9c:3f:9c:00:f7:f3:
15:a4:6a:85:d4:69:1d:ba:bd:e7:22:45:96:b2:15:b3:af:d7:
26:ff:8b:49:57:c1:65:e5:69:15:16:86:ff:d0:ff:49:0b:d9:
24:24:2a:d4:97:b7:61:c7:b9:20:93:b8:e8:72:58:df:92:66:
d7:71:24:f3:13:0e:41:66:44:b8:8d:6e:05:1d:66:c5:85:b0:
cf:27:57:7d:22:54:78:38:dc:41:dd:5e:9d:47:85:c5:79:40:
01:55:9b:82:09:30:c3:f8:05:02:b1:7e:56:41:63:70:95:47:
bb:61:43:f1:20:8f:24:25:1a:7f:cf:b2:f1:f7:88:70:ec:03:
9a:c6:3f:73:02:94:47:8d:55:cc:48:48:26:fc:cd:7d:af:56:
e0:79:b7:ad:2f:3b:0d:88:8c:20:f7:d6:4d:d4:fe:e4:c2:01:
65:9b:74:e0:a5:85:74:d5:b0:a7:00:4c:f9:7c:7d:e8:34:2c:
68:3a:f4:3d:19:ed:c8:e7:9a:35:c8:76:73:c0:32:a1:3c:50:
e4:bd:6c:f9:7d:0e:8e:f1:6c:b6:1d:66:ed:19:33:82:4b:72:
98:f2:2f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:33:52 2026 by rpki-client